Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e39372e3232382e302f32332d3234203d3e2031323339.roa
File:                     3231362e39372e3232382e302f32332d3234203d3e2031323339.roa (raw, json)
Hash identifier:          loO/3b7EA6CEEesxh0DhlZWWVL+UkS6UsdBNzmLAed4=
Subject key identifier:   A6:3E:72:B6:F8:C5:28:2B:E0:EA:63:3F:9A:F4:A9:F8:8E:40:15:27
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       5612C5A2358C7C5C3147760DE2A9D77C49E70169
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e39372e3232382e302f32332d3234203d3e2031323339.roa
Signing time:             Mon 25 Oct 2021 12:57:03 +0000
ROA not before:           Mon 25 Oct 2021 12:52:03 +0000
ROA not after:            Mon 24 Oct 2022 12:57:03 +0000
asID:                     1239
IP address blocks:        216.97.228.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:12:c5:a2:35:8c:7c:5c:31:47:76:0d:e2:a9:d7:7c:49:e7:01:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Oct 25 12:52:03 2021 GMT
            Not After : Oct 24 12:57:03 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c6:3b:8a:51:db:31:25:13:04:8e:9d:d2:8b:
                    35:3e:da:63:78:9e:e2:5c:45:e7:5f:a8:d2:47:bd:
                    d2:10:07:b5:b0:c2:96:8b:5f:d0:2a:ac:92:2c:25:
                    18:2b:2c:88:9e:e6:a4:a8:9d:96:f8:aa:3b:b1:b9:
                    05:cf:ab:a7:da:61:21:60:c7:c2:c1:d3:c1:e4:ad:
                    71:0b:81:0b:c1:33:74:f3:f6:d6:53:74:41:5d:95:
                    9f:b8:e8:93:19:36:c3:1e:32:c7:dd:67:4c:12:99:
                    74:0c:fe:1a:36:80:3f:3f:3e:3e:14:2a:89:ef:c4:
                    b3:ae:78:03:49:32:94:e7:67:69:e4:bd:2f:0a:f5:
                    9b:4b:da:5c:e4:b2:5e:c2:3a:a0:91:16:9d:f6:74:
                    56:66:ca:0a:22:8a:a9:5f:80:74:77:ef:a0:13:8a:
                    25:a7:65:24:db:8b:c2:32:37:22:b7:32:31:24:66:
                    2c:7b:a1:a8:38:3c:8f:0c:21:8b:b5:f8:7b:ed:20:
                    34:75:c8:2c:16:0f:a9:98:26:38:7e:9a:da:56:26:
                    b7:32:21:40:8f:22:52:80:79:74:93:be:e5:fe:01:
                    a1:c9:b6:90:a0:30:2c:03:f6:86:27:8e:d8:fd:43:
                    ba:d6:9e:53:2c:4a:5f:f9:09:b3:ab:8b:64:6e:d6:
                    5b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:3E:72:B6:F8:C5:28:2B:E0:EA:63:3F:9A:F4:A9:F8:8E:40:15:27
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e39372e3232382e302f32332d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.97.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:6e:dc:bd:62:d0:c5:65:4a:62:16:29:2c:13:8f:f6:e8:42:
         87:c9:da:eb:76:bc:ee:3c:fa:d7:5b:09:5b:47:20:89:65:f5:
         1c:a8:b3:96:78:a9:99:34:48:74:2a:36:56:e8:97:ec:d1:14:
         d8:91:b6:64:b0:ab:ae:3a:25:94:0e:ce:b7:6d:2d:45:ba:74:
         9d:39:37:37:9e:cc:a6:9c:57:8c:63:89:a7:f5:41:12:06:be:
         53:e9:55:89:27:1c:67:4c:47:7a:1e:41:c3:28:51:de:04:6a:
         d3:15:b7:9a:30:f4:c0:23:3d:18:e0:0d:af:2c:4a:9b:ba:ca:
         a4:4b:b2:92:ba:b9:71:fa:4b:79:aa:f9:f0:51:4a:b5:6b:d3:
         26:7b:2c:03:1c:e3:92:e7:a3:f7:26:83:05:3e:14:f7:56:43:
         ce:84:ef:0a:38:00:41:15:76:d7:48:16:8f:37:fe:3a:0c:7c:
         9c:c7:c3:48:a7:3c:03:e3:ec:98:e5:0f:aa:60:cf:5e:02:8d:
         26:ae:12:fd:27:18:45:45:71:15:b2:e5:3a:51:b1:22:9d:db:
         c5:25:e0:bb:48:06:84:16:fe:d4:72:54:f7:27:a9:be:df:d5:
         d7:11:c0:50:8d:e8:58:46:8d:91:cc:a2:33:51:61:bc:29:50:
         18:5d:ee:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:58 2024 by rpki-client on console-fra.rpki-client.org